Commit Graph

2562 Commits

Author SHA1 Message Date
Dongsu Park
89553c6977 Merge pull request #107 from flatcar-linux/dongsu/sqlite-3.32.3
dev-db/sqlite: move sqlite to coreos-overlay
2020-09-23 14:39:41 +02:00
Dongsu Park
9e6d56ed1b dev-db/sqlite: move sqlite to coreos-overlay
Move dev-db/sqlite to coreos-overlay to resolve security issues, as well
as to keep non-full archive ebuilds.
2020-09-18 17:47:40 +02:00
Dongsu Park
6916f04de8 net-libs/libpcap: update to 1.9.1
Update net-libs/libpcap to 1.9.1, to address security issue
CVE-2019-15163, an issue of allowing attackers to cause a denial of
service (NULL pointer dereference and daemon crash) if a crypt() call
fails.
2020-09-17 13:41:47 +02:00
Dongsu Park
a9a8ee6efc net-analyzer/tcpdump: update to 4.9.3
Update tcpdump to 4.9.3, to address security issue CVE-2018-10103,
mishandling the printing of SMB data.
2020-09-17 13:41:45 +02:00
Dongsu Park
5490b0439c net-misc/rsync: update to 3.2.3
Update rsync to 3.2.3, actually to update zlib bundled in rsync.
It is to address security issue CVE-2016-9841, an issue of allowing
context-dependent attackers to have unspecified impact by leveraging
improper pointer arithmetic.
2020-09-17 13:41:42 +02:00
Dongsu Park
9384fe3321 dev-libs/libbsd: update to 0.10.0
Update libbsd to 0.10.0, to address security issue CVE-2019-20367,
an out-of-bounds read during a comparison for a symbol name from the
string table.
2020-09-17 13:41:23 +02:00
Dongsu Park
4c9ee1d6e8 app-misc/jq: update to 1.6-r3
Update app-misc/jq to 1.6-r3, to address security issue CVE-2015-8863.
It is mainly to fix off-by-one error in the tokenadd function. It allows
remote attackers to cause a denial of service (crash) via a long
JSON-encoded number, which triggers a heap-based buffer overflow.
2020-09-17 13:41:21 +02:00
Dongsu Park
f4ba9b110c .github: Improve body text of PR for virtual/rust
Improve body text of each PR for `virtual/rust`, by mentioning that
it should be merged together with its paired PR in coreos-overlay.

Explicitly name `virtual/rust` instead of `Cargo`, because there is
no more ebuild for `cargo`.
Rename the dispatched event-type name to `rust-pull-request-main`, as
`cargo` has already disappeared.

Make the repository-dispatch action receive additional client-payload with
a field `coreos-overlay-pull-request-number` sent by the corresponding PR
in coreos-overlay. The PR number is then used for adding a link in the body
text, for pointing back to the PR in coreos-overlay.
2020-09-09 11:56:52 +02:00
Flatcar Buildbot
2cb1b39e52 Upgrade Cargo in main from 1.44.1 to 1.46.0 2020-09-01 07:31:46 +00:00
Thilo Fromm
be6d21ef38 net-firewall/ipset: update to ipset-7.6
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-08-27 18:58:28 +02:00
Krzesimir Nowak
31bbaa6546 Merge pull request #99 from flatcar-linux/krnowak/fix-rules
sys-fs/mdadm: Drop it, temporarily
2020-08-27 16:14:03 +02:00
Thilo Fromm
5ede2a63eb Merge pull request #100 from flatcar-linux/t-lo/iproute2-5.8.0-with-elf-support
sys-apps/iproute2: bump to 5.8.0, add ELF support
2020-08-27 13:52:25 +02:00
Thilo Fromm
9707103932 sys-apps/iproute2: bump to 5.7.0.xx, add ELF support
Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
2020-08-27 09:31:20 +02:00
Krzesimir Nowak
87a61e40a0 sys-fs/mdadm: Drop it, temporarily
We are going to have mdadm in coreos-overlay. It will contain an extra
patch, so it can't be a part of portage-stable.
2020-08-25 11:25:21 +02:00
Kai Lüke
91fbd929a7 net-dns/bind: Drop old ebuild file to silence warning
The old ebuild file has a syntax issue and is missing a patch file.
2020-08-21 12:04:33 +02:00
Thilo Fromm
7df019224b net-dns/bind-tools: update to 9.11.22 and 9.16.6
Signed-off-by: Vincent Batts <vbatts@kinvolk.io>
2020-08-20 17:25:43 -04:00
Kai Lüke
612735eced dev-libs/jansson: Import from Gentoo 2020-08-10 23:31:34 +02:00
Kai Lüke
4ef02eb401 eclass/ssl-cert: Sync from Gentoo 2020-08-07 22:31:40 +02:00
Kai Lüke
37d6fdd69f net-nds/openldap: Sync from Gentoo 2020-08-07 22:22:51 +02:00
Kai Lüke
3d58e109d8 acct-user/tss: Import from Gentoo 2020-08-07 13:54:40 +02:00
Kai Lüke
40face0d7b acct-group/tss: Import from Gentoo 2020-08-07 13:50:14 +02:00
Kai Lüke
df8a5e3754 dev-embedded/u-boot-tools: Sync from Gentoo 2020-08-06 16:36:38 +02:00
Kai Lüke
a87cd173d9 app-crypt/mit-krb5: Fix Python version 2020-08-05 18:52:43 +02:00
Kai Lüke
2e60c26cd3 app-crypt/mit-krb5: Sync with Gentoo's latest stable 2020-08-05 18:52:36 +02:00
Kai Lüke
d731c2b6d7 net-dns/bind-tools: Sync with Gentoo's latest stable 2020-08-05 18:52:31 +02:00
Dongsu Park
0ac37230ef dev-util/pkgconfig: bump to 0.29.2 for PKG_CHECK_MODULES_STATIC
pkg-config 0.29 or newer introduced a macro `PKG_CHECK_MODULES_STATIC`,
which is needed by ebuilds like dev-util/strace >= 5.5.
So we should update pkg-config to 0.29.2, to avoid such issues.
(see 0efb668bd5)

```
***** autoconf *****
***** PWD: /build/amd64-usr/var/tmp/portage/dev-util/strace-5.6/work/strace-5.6
***** autoconf --force -I /build/amd64-usr/usr/share/aclocal

configure:17585: error: possibly undefined macro: PKG_CHECK_MODULES_STATIC
```
2020-07-29 17:25:26 +02:00
Kai Lüke
6a15a68fc3 Revert "sys-libs/readline: update to 8.0_p4"
This reverts commit 36bc8e0edb7ce961b5020b8152514560a5feb3eb
until we have a newer gdb. The md5-cache changes were dropped.
2020-07-28 18:41:24 +02:00
Kai Lüke
761551ac22 Merge pull request #91 from flatcar-linux/kai/no-md5-cache
metadata: Delete md5-cache
2020-07-28 16:52:23 +02:00
Kai Lüke
898d49bdc1 metadata: Delete md5-cache
The metadata/md5-cache folder is machine-generated based on the
other files in the repository. It causes merge conflicts when at
one time they were not regernated in a commit and then later a
commit does it and includes cache changes which are incompatible
with later or newer states.
Remove the folder as it is not necessary to have it and was removed
in upstream Gentoo, too.
2020-07-27 16:22:24 +02:00
Kai Lüke
7411de99f3 .github: Give background on Rust updates 2020-07-24 11:15:26 +02:00
Kai Lüke
042515d58f .github: Only update the new main branch
The new main branch is the only branch that should get new software
updates (with the exception of the maintenance branches that get kernel
updates).
2020-07-24 11:10:42 +02:00
Kai Lüke
bdc2dc8405 .github: Use new main branch 2020-07-23 18:38:55 +02:00
Dongsu Park
62c7d06103 .github: add Github actions for virtual/rust
Whenever a new upstream Rust release appears, a Github workflow in
`coreos-overlay` creates a new pull request for `dev-lang/rust`.
At the same time, it sends a repository dispatch event to
portage-stable, so it also creates a pull request for `virtual/rust`.
2020-07-23 18:37:21 +02:00
Dongsu Park
d76aaa8255 Merge pull request #82 from flatcar-linux/dongsu/readline-pcre-alpha
{sys,dev}-libs: readline 8.0_p4, libpcre2 10.34 for alpha
2020-07-23 11:00:46 +02:00
Sayan Chowdhury
f4278500a1 chore(metadata): Regenerate cache 2020-07-20 11:23:42 +00:00
Sayan Chowdhury
acaba20aff app-crypt/argon2: Add new package
Signed-off-by: Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
2020-07-20 11:22:51 +00:00
Dongsu Park
1c85345546 Merge pull request #79 from flatcar-linux/dongsu/libgit-alpha
dev-libs/libgit2: import libgit2 for alpha
2020-07-14 14:37:44 +02:00
Dongsu Park
2640ab9600 Merge pull request #80 from flatcar-linux/rust-1.44.1-alpha
Upgrade Cargo in Alpha from 1.43.1 to 1.44.1
2020-07-14 14:37:00 +02:00
Dongsu Park
2897d75a24 Merge pull request #73 from flatcar-linux/dongsu/gnupg-remove-alpha
app-crypt/gnupg: move gnupg to coreos-overlay for alpha
2020-07-10 09:58:10 +02:00
Dongsu Park
5c344dfb72 eclass: sync linux-info.eclass to fix Kernel build issues
Kernel 5.8-rc2 or newer added a commit
f2f02ebd8f
("kbuild: improve cc-option to clean up all temporary files") , which
causes make commands to create an object output directory. Apparently
harmless. The commit was backported to stable Kernels, 4.19.131, 5.4.50,
5.7.7.

In Flatcar and Gentoo, however, `getfilevar()` in `linux-info.eclass`
runs a make command, which creates `${M}`, an object output directory,
with a root account. As Gentoo sandbox creates everything as non-root
account, the subsequent steps like `src_unpack` fail to touch the same
directory.

Upstream Gentoo already has a fix
5a3acd443c
("linux-info.eclass: Pass M=${T} to the Linux Makefile unconditionally.").
See also https://bugs.gentoo.org/729178 .

So simply sync `linux-info.eclass` with Gentoo.
2020-07-08 11:37:45 +02:00
Dongsu Park
2f8c3420b0 Merge pull request #49 from flatcar-linux/dongsu/git-2.26-alpha
dev-vcs/git: bump to 2.26.2 for alpha
2020-06-29 10:33:26 +02:00
Dongsu Park
e43021feb2 dev-libs/libpcre2: update to 10.34
Update dev-libs/libpcre2 to 10.34, to address security issues listed in
[GLSA 202006-16](https://security.gentoo.org/glsa/202006-16).

* CVE-2019-20454
2020-06-25 11:07:15 +02:00
Dongsu Park
3913e852e7 sys-libs/readline: update to 8.0_p4
Update sys-libs/readline to 8.0_p4, to address security issues listed in
[GLSA 202006-04](https://security.gentoo.org/glsa/202006-04).

* CVE-2019-6488
* CVE-2019-7309
* CVE-2019-9169
* CVE-2020-10029
* CVE-2020-1751
2020-06-25 11:07:13 +02:00
Flatcar Buildbot
21f6580c69 Upgrade Cargo in Alpha from 1.43.1 to 1.44.1 2020-06-23 07:30:48 +00:00
Dongsu Park
751413c7c0 eclass: import cmake.eclass
As `dev-libs/libgit2` inherits `cmake.eclass`, we need to import it
from upstream Gentoo.
2020-06-22 13:55:14 +02:00
Dongsu Park
e0d8b0246a dev-libs/libgit2: import libgit2
As dev-lang/rust >= 1.44.0 requires `dev-libs/libgit2`, we need to
import libgit2 from upstream Gentoo.
2020-06-22 13:54:26 +02:00
Sayan Chowdhury
f92aec8c94 sys-apps/iucode_tool: Add iucode_tool-2.3.1/2.3
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-06-18 19:44:26 +05:30
Kai Lüke
22e7bfece1 sys-libs/tdb: Bump to 1.3.15 2020-05-29 14:22:32 +02:00
Kai Lüke
629ffbccdb sys-libs/tevent: Bump to 0.9.37 2020-05-29 14:22:31 +02:00
Kai Lüke
0f71e99622 sys-libs/talloc: Bump to 2.1.11 2020-05-29 14:22:31 +02:00
Kai Lüke
d169023e3f Revert "sys-libs/tdb: move sys-libs/tdb to coreos-overlay"
This reverts commit 9d65392f7c49ea88cd42c3243c3cb1e07160c50e.
2020-05-29 14:22:31 +02:00
Kai Lüke
da4ca881d5 Revert "sys-libs/tevent: move sys-libs/tevent to coreos-overlay"
This reverts commit 4fa5574db866abbba28e91c69539194805eee52d.
2020-05-29 14:22:31 +02:00
Kai Lüke
984fe13c62 Revert "sys-libs/talloc: move talloc to coreos-overlay"
This reverts commit f4cdd5b7a0c7f1e7da9948cbb4937d63380f53b5.
2020-05-29 14:22:31 +02:00
Dongsu Park
1b1e9ca582 Merge pull request #67 from flatcar-linux/rust-1.43.1-alpha
Upgrade Cargo in Alpha from 1.36.0 to 1.43.1
2020-05-29 09:49:15 +02:00
Dongsu Park
a404f75580 Merge pull request #62 from flatcar-linux/dongsu/remove-strace-alpha
dev-util/strace: move strace to coreos-overlay for alpha
2020-05-28 17:12:24 +02:00
Dongsu Park
50d8978bd1 dev-vcs/git: bump to 2.26.2
Update git to 2.26.2, to address the following security issues:

* [CVE-2020-5260](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5260)
* [CVE-2020-11008](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11008)
2020-05-28 17:05:33 +02:00
Dongsu Park
e777cf2378 dev-libs/libgpg-error: import libgpg-error
Import a new package libgpg-error needed by app-crypt/gnupg 2.2.20.
2020-05-26 10:41:31 +02:00
Dongsu Park
365306aea9 app-crypt/gnupg: move gnupg to coreos-overlay
To apply 3rd-party patches to gnupg, move it to coreos-overlay.
2020-05-26 09:51:58 +02:00
Benjamin Gilbert
c98c795dc7 bump(metadata/glsa): sync with upstream 2020-05-25 12:10:09 +02:00
Benjamin Gilbert
8e6121e55e bump(metadata/glsa): sync with upstream 2020-05-25 12:10:09 +02:00
Benjamin Gilbert
ad734b5315 bump(metadata/glsa): sync with upstream 2020-05-25 12:10:09 +02:00
Benjamin Gilbert
f1c0fc9283 bump(metadata/glsa): sync with upstream 2020-05-25 12:10:09 +02:00
Dongsu Park
7f979e1bfc dev-vcs/git: update to 2.24.1
Update git to 2.24.1 to address the following security issues:

* [CVE-2019-1348](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1348)
* [CVE-2019-1349](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1349)
* [CVE-2019-1350](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1350)
* [CVE-2019-1351](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1351)
* [CVE-2019-1352](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1352)
* [CVE-2019-1353](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1353)
* [CVE-2019-1354](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1354)
* [CVE-2019-1387](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1387)
* [CVE-2019-19604](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19604)
2020-05-25 12:10:09 +02:00
Benjamin Gilbert
a3e2871525 bump(app-editors/vim-core): sync with upstream 2020-05-25 12:10:09 +02:00
Benjamin Gilbert
4130429e44 app-editors/vim: move to overlay 2020-05-25 12:10:08 +02:00
Benjamin Gilbert
80e3e9a338 bump(sys-fs/e2fsprogs): sync with upstream 2020-05-25 12:10:08 +02:00
Benjamin Gilbert
58410bf398 bump(sys-libs/e2fsprogs-libs): sync with upstream 2020-05-25 12:10:08 +02:00
Benjamin Gilbert
a0bb13a47e bump(dev-db/sqlite): sync with upstream 2020-05-25 12:10:08 +02:00
Benjamin Gilbert
001e63779b bump(dev-libs/nss): sync with upstream 2020-05-25 12:10:08 +02:00
Benjamin Gilbert
4e8a606e3a bump(dev-libs/nspr): sync with upstream 2020-05-25 12:10:08 +02:00
Benjamin Gilbert
3c7d8f4321 bump(dev-libs/libgcrypt): sync with upstream 2020-05-25 12:10:07 +02:00
Benjamin Gilbert
6d1ceac2bc bump(app-arch/libarchive): sync with upstream 2020-05-25 12:10:07 +02:00
Benjamin Gilbert
3b88f61811 bump(app-arch/unzip): sync with upstream 2020-05-25 12:10:07 +02:00
Benjamin Gilbert
0b4f35380a bump(net-dns/libidn2): sync with upstream 2020-05-25 12:10:07 +02:00
Benjamin Gilbert
5633992cbf eclass: add empty usr-ldscript.eclass for compatibility 2020-05-25 12:10:07 +02:00
Flatcar Buildbot
b8bbc13657 Upgrade Cargo in Alpha from 1.36.0 to 1.43.1 2020-05-12 07:32:29 +00:00
Sayan Chowdhury
517e626d6f virtual/resolvconf: Add a new package, dependency of wireguard-tools
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-05-06 10:52:22 +00:00
Oleksii Samorukov
ec11614f61 Add dev-libs/oniguruma, required by jq regexp parser 2020-05-02 13:43:38 +02:00
Dongsu Park
325b2f09e2 dev-lang/rust: remove duplicates, move to coreos-overlay
`dev-lang/rust` has been moved to coreos-overlay since a long time.
However, we have still kept `dev-lang/rust` in portage-stable as well.
As it is not needed at all, let's simply remove it.
2020-04-29 16:28:21 +02:00
Dongsu Park
c311eacb7f chore(metadata): Regenerate cache 2020-04-29 13:04:43 +02:00
Dongsu Park
74d8f36c46 dev-util/strace: move strace to coreos-overlay
To build strace without failures from pkg-config, we need to move
`dev-util/strace` to coreos-overlay.
2020-04-29 13:04:43 +02:00
Dongsu Park
d87f113ebb virtual/rust: set version back to 1.36.0
We updated `virtual/rust` to 1.41.1, but have not done so for
`dev-lang/rust`, which remains as 1.36.0. Such a mismatch prevents
the whole build to fail.

For now, let's revert `virtual/rust` back to 1.36.0.
2020-04-28 18:00:08 +02:00
Dongsu Park
e7c4d9353a eclass: make cargo depend on virtual/rust instead of virtual/cargo
Since `virtual/cargo` does not exist in the recent Rust ebuilds,
dependency on the missing package `virtual/cargo` caused build issues
in the SDK. So we should make it depend on `virtual/rust` to fix the
build issues.
2020-04-28 17:57:46 +02:00
Dongsu Park
a6dbbda5db chore(metadata): Regenerate cache 2020-04-23 18:28:25 +02:00
Dongsu Park
97554ed7d5 sys-devel/gdb: move gdb to coreos-overlay
As crossdev only looks up gdb under coreos-overlay, we should simply
move every gdb ebuild to coreos-overlay, and remove gdb in
portage-stable.
2020-04-23 18:27:33 +02:00
Sayan Chowdhury
3aa699c25a net-firewall/conntrack-tools: Add the new package to alpha
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
2020-04-23 07:38:09 +00:00
Dongsu Park
9882b45d92 Merge pull request #42 from flatcar-linux/dongsu/bump-qemu-alpha
Update unzip, libidn2, firmware to address GLSA 202003-* for alpha
2020-04-17 10:03:05 +02:00
Dongsu Park
f4cf47125d virtual: rename virtual/cargo to virtual/rust
Following upstream Gentoo, we rename `virtual/cargo` to `virtual/rust`.
Update virtual/rust to 1.41.1.
2020-04-03 14:55:41 +02:00
Dongsu Park
803dc87175 Merge pull request #41 from flatcar-linux/dongsu/dwarves-alpha
dev-util/dwarves: introduce new dev tool dwarves for alpha
2020-03-31 22:15:52 +02:00
Dongsu Park
5325a17b31 acct-group/kvm: add acct-group/kvm for qemu 4.2.0
Add a new ebuild acct-group/kvm, which is needed by qemu 4.2.0.
2020-03-31 10:28:41 +02:00
Dongsu Park
f49cbdf90b sys-firmware/ipxe: update to 1.0.0_p20190728
needed by app-emulation/qemu-4.2.0
2020-03-31 10:28:41 +02:00
Dongsu Park
d9f51da3c9 sys-firmware/seabios: update to 1.12.0
needed by app-emulation/qemu-4.2.0
2020-03-31 10:28:41 +02:00
Dongsu Park
96dcb5c0f6 sys-firmware/edk2-ovmf: update to 201905
needed by app-emulation/qemu-4.2.0
2020-03-31 10:28:41 +02:00
Dongsu Park
3b4ace2f53 net-dns/libidn2: update to 2.3.0
Update libidn2 to 2.3.0 to address the following issues:

[CVE-2019-12290](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12290)
[CVE-2019-18224](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18224)
2020-03-31 10:28:41 +02:00
Dongsu Park
be7881cc9f app-arch/unzip: update to 6.0_p25-r1
Update unzip to 6.0_p25-r1 to address the following issues:

[CVE-2018-1000035](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000035)
[CVE-2019-13232](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13232)
2020-03-31 10:28:41 +02:00
Dongsu Park
9df1c78642 Merge pull request #32 from flatcar-linux/dongsu/openssh-eclass
acct-*: add acct packages for openssh 8.1 for alpha
2020-03-31 10:05:36 +02:00
Dongsu Park
f26cd86069 dev-util/dwarves: introduce new dev tool dwarves
To build Kernel 5.4 with CONFIG_DEBUG_INFO_BTF, we need to get pahole,
a part of dwarves, included in the Flatcar SDK.
So simply import dwarves from upstream Gentoo.
2020-03-30 14:07:13 +02:00
Dongsu Park
82c2347d28 dev-libs/elfutils: bump elfutils to 0.177
Since dev-utils/dwarves depends on elfutils 0.177, we need to bump
also elfutils.
2020-03-30 14:06:10 +02:00
Dongsu Park
021ca51d6e Merge pull request #38 from flatcar-linux/dongsu/gdb-9.1-alpha
sys-devel/gdb: update to 9.1 for alpha
2020-03-27 17:15:15 +01:00
Dongsu Park
b14b131579 Merge pull request #29 from flatcar-linux/dongsu/remove-old-cargo-alpha
virtual/cargo: remove unnecessary cargo versions for alpha
2020-03-25 09:25:55 +01:00